Checkmarx / kics

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
https://kics.io
Apache License 2.0
2.04k stars 304 forks source link

Add Support to Buildah #3135

Closed emanuelb closed 2 years ago

emanuelb commented 3 years ago

https://buildah.io/

A tool that facilitates building OCI container images.

can be used via script to build container by separate steps not through Containerfile/Dockerfile (when buildah bud not used), for example: https://www.redhat.com/sysadmin/building-buildah#creating-and-running-the-bash-script

There lots of results on github for searching buildah run, the issue about adding support for such scripts (or invocation of buildah in other ways): https://github.com/chapeaux/cncpx/blob/f7311f81eafedb5a5780518e667e7c566ce1021f/containers/images/godot_ubi8.sh

rafaela-soares commented 2 years ago

Hi, @emanuelb 🙂 I hope this message finds you well.

Thank you so much for your suggestion. We are happy to inform you that KICS will start to support Buildah (PR #4740)!